CVE-2026-36981-Kernel-EoP-PoC

CVE-2026-36981-Kernel-EoP-PoC Kernel write-what-where condition within the pwdrvio.sys kernel driver of MiniTool. Demonstrates a debugger-assisted arbitrary kernel write primitive that can be leveraged toward privilege escalation. 2026-02-09 Vendor notified 2026-03-05 Vendor acknowledged 2026-03-...

CVE-2026-31429-POC

CVE-2026-31429 — Linux Kernel: Cross-Cache Free of KFENCE-Allocated SKB Head via bpfprogtestrunskb Severity: Medium CWE-763: Release of Invalid Pointer or Reference Published: 2026-04-20 Affected subsystem: net/core/skbuff.c — skbkfreehead Researcher: Antonius / w1sdom — Blue Dragon Security...

CVE-2026-31431-C

Copy-Fail Exploit CVE-2026-31431 Local privilege escalation exploit targeting a Linux kernel copy-on-write vulnerability via AFALG sockets and splice operations. Overview This exploit abuses a kernel-level memory corruption condition in the Linux crypto subsystem AFALG combined with zero-copy...

desc_race

descrace iOS 15.1 kernel exploit POC for CVE-2021-30955 Huge thanks to @realBrightiup for the awesome bug and exploit stratergy. His writeup can be found at: https://www.cyberkl.com/cvelist/cvedetail/24...

cve-2026-31431-mitigation

CVE-2026-31431 Mitigation Script This repository provides a temporary mitigation and revert script for CVE-2026-31431, a Linux kernel local privilege escalation vulnerability. Disclaimer This is a temporary workaround, not a permanent fix. Use at your own risk. Always test in a non-production...

linux-copy-fail-CVE-2026-31431

Linux Copy-Fail Analysis CVE-2026-31431 🛡️ This repository contains an in-depth analysis, Proof-of-Concept PoC, and laboratory test results for the CVE-2026-31431 vulnerability, popularly known as "Copy-Fail". Copy-Fail exploits a logic flaw in the Linux Kernel’s Crypto API AFALG combined with the...

CVE-2026-31431

Copy Fail CVE-2026-31431 - Comprehensive Writeup 1. Vulnerability Overview Vulnerability Name: Copy Fail CVE Identifier: CVE-2026-31431 Discovered By / Authors: Xint Code Research Team building upon initial foundational research by Theori researcher Taeyang Lee. "Copy Fail" is a critical logic...

CVE-2026-31431-Patch

CVE-2026-31431 Copy Fail Mitigation & Patch Script Image Before Patch and Vulnerable Image After Patch With Script This repository contains a specialized bash script designed to mitigate and patch CVE-2026-31431 , also known as "Copy Fail". This vulnerability is a critical Local Privilege...

copy-fail-CVE-2026-31431-universal

CVE-2026-31431 - AFALG AEAD Splice UAF PoC Multi-language implementation and compatibility with older versions of Python. C exploit.c gcc -o exploit exploit.c -O2 gcc -o exploit exploit.c -static -O2 ./exploit Tested on Ubuntu 20.04: Python exploit-python3-8-10.py Compatible with Python 3.8.10 an...

CVE-2026-31431-rs

CVE-2026-31431 PoC copyfail Structure src/ ├── main.rs Exploit: AFALG + splice to overwrite /bin/su └── bin/ └── payload.rs Payload Self-contained nostd binaries with zero runtime dependencies: poc-rs: 4.1 KB payload embedded via includebytes! payload: 1.7 KB Build Requires Rust 1.85+: cargo buil...

CVE-2026-20805-PoC

CVE-2026-20805 PoC Proof of Concept demonstrating an information disclosure vulnerability in Microsoft Desktop Window Manager dwm.exe. Overview This repository contains a custom Proof of Concept PoC developed to reproduce CVE-2026-20805, an information disclosure vulnerability affecting the Windo...

cve-2026-31431-fleet-remediator

CVE-2026-31431 Fleet Audit and Remediation Tool 中文说明 This project is a fleet-scale orchestrator for auditing and remediating CVE-2026-31431 on Linux hosts in enterprise/internal networks. Batch SSH login to multiple hosts Risk evidence collection and status classification Temporary mitigation...

Copy-Fail_Detect_and_mitigate_CVE-2026-31431

Copy Fail - CVE-2026-31431 Detector and Mitigator Detect exposure to CVE-2026-31431 Copy Fail and optionally apply a host-level mitigation by disabling the algifaead kernel module on vulnerable systems. What this repo provides copyfail-check.sh — checks kernel patch status, runtime module exposur...

PATCH-CVE-2026-31431-Ubuntu_Debian

🛡️ CVE-2026-31431 Copy Fail Mitigation - Linux Kernel This repository contains scripts designed to neutralize the critical vulnerability CVE-2026-31431 , nicknamed "Copy Fail" , on Ubuntu systems. !IMPORTANT Compatibility: These scripts are tailored for and tested on Ubuntu Server 24.04 LTS. While...

device_renesas_kernel_AOSP10_r33_CVE-2021-33034

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

CVE-2026-31431-Advanced-Exploit

CVE-2026-31431 — Copy Fail Linux Kernel Page Cache Out-of-Bounds Write Vulnerability AFALG AEAD Scatterlist Chain Error Overview The Linux kernel algifaead interface contains a vulnerability that allows unprivileged users to write arbitrary data to the page cache of any readable file — completely...

CVE-2026-20698-PF_ROUTE-Heap-Overflow

CVE-2026-20698 — XNU Kernel Heap Overflow via PFROUTE RTAGENMASK Overview Heap buffer overflow in XNU's routing socket PFROUTE when processing RTAGENMASK in routemsg. Triggers kernel panic from an unprivileged process with no entitlements. CVE : CVE-2026-20698 credited to DARKNAVY Affected : iOS...

copyfail

Copy Fail - CVE-2026-31431 PoC in C Local privilege escalation exploit for CVE-2026-31431 Copy Fail, written in C. How It Works 1. ELF parsing : resolves /usr/bin/su's entry point virtual address to a file offset via PTLOAD program headers 2. AFALG setup : binds to authencesnhmacsha256,cbcaes wit...

CTT-NFS-Vortex-RCE

CTT-NFS-Vortex-RCE New Physics Disclosure This repository contains a full weaponized exploit for CVE-2026-21509 , targeting the Windows Network File System NFSv4.1 kernel-mode driver nfssvr.sys. CTT-NFS-Vortex-RCE CVE-2026-21509 ⚠️ Technical Advisory: New Physics Disclosure This repository contain...

CTT-Kernel-Resonance-io_uring-Temporal-Phase-Transition

This exploit for CVE-2026-24102 represents the pinnacle of the SimoesCTT series. By targeting iouring—the Linux kernel's most advanced asynchronous interface—you are attacking the very concept of "Sequential Logic." In iouring, system calls are not executed; they flow. We will exploit the Tempora...